Earlier quoted context omitted.
This is a sensible move. Plus you can just keep your "authentication" phone at home instead of having it on you when you're out for no good reason.
Not if you want to use tap-to-pay systems.
Just use your credit card
The Vietnam government has banned rooted phones from using any banking app
241–250 of 643 posts
Re: The Vietnam government has banned rooted phones from using any banking app
#242Earlier quoted context omitted.
Maybe it’s country-specific, but most banks I know support a card reader or photoTAN device. You don’t need to use a phone.
I don't think card readers can display payment information, can they? And I have no idea why, but no bank offers photoTAN devices in my country. They seem like an interesting concept, even though I imagine the underlying hardware isn't far from that of a phone, in the end.
The card readers have an LCD display that shows the information.
Re: The Vietnam government has banned rooted phones from using any banking app
#243Earlier quoted context omitted.
Not if you want to use tap-to-pay systems.
I wonder if this makes room in the market for some simpler device for payments. Something like a wearable that you can tap-to-pay and has the signed software attenuation but nothing else so you can't be tracked using GPS.
Long ago we used to have ‘mini’ credit cards. You could get a two-thirds size magstripe card from some major banks that’d go right on your keychain. Discover had a cute little bean keychain with a flip-out magstripe card (the Discover2Go) as well.
At the same time there was also the Exxon-Mobil Speedpass RFID fob, and I remember there being a huge discussion about “the battle of the keychain” and whose payment instrument would win being on your keys to be used the most alongside your loyalty cards.
Re: The Vietnam government has banned rooted phones from using any banking app
#244Earlier quoted context omitted.
I guess you can still do banking on your PC? I stopped using banking apps on my phones a few years ago - they got more and more annoying, and I don't buy into the "the device is secure and should be used as a trust token". So I'm now back to banking only on my computer, with a hardware token for TAN generation.
That probably means giving up the ability to mobile deposit checks - every bank I've ever had only allows that through their app.
Personally, I'm OK with that tradeoff. I live close to my bank, so going to deposit in person isn't a problem for me.
Re: The Vietnam government has banned rooted phones from using any banking app
#245Earlier quoted context omitted.
Not if you want to use tap-to-pay systems.
I wonder if this makes room in the market for some simpler device for payments. Something like a wearable that you can tap-to-pay and has the signed software attenuation but nothing else so you can't be tracked using GPS.
that exists. It's called Felica, and it's used all over Japan. train passes, vending machine, convenience stores, many restaurants. Built into iphone and a few androids.
Note that the payments are tied to a card/chip but you can (at the moment) buy new card no id/registration required
Re: The Vietnam government has banned rooted phones from using any banking app
#246Earlier quoted context omitted.
As I mentioned in another post: By 2026, you'll need two phones. My current setup: 1) An unmodified iPhone SE (2022 model) with OS support until 2032. This runs all my authentication, banking, health, etc. It is in airplane mode 99% of the time unless I need it. 2) The second is a Pixel 9a with Graphene OS for daily use, routing and internet access. This is expensive, but I found it to be the only viable solution to…
>An unmodified iPhone SE (2022 model) with OS support until 2032 What makes you think it'll be supported for a decade? Looking at the past models, the support period is around 5-7 years. If you count security updates that might get you to 10 years, but at the 7-9 year mark apps will eventually refuse to update because you're not on the latest ios. https://en.wikipedia.org/wiki/IPhone#Models
By the time that iPhone SE 3 finally goes unsupported (even the iPhone SE 2 from 2020 has yet to lose support) you'll just buy a cheap refurbished iPhone 16e. Old-gen iPhones are widely available and quite cheap.
Re: The Vietnam government has banned rooted phones from using any banking app
#247So, if you cannot cryptographically prove to a remote server that your device is running essentially unmodified, vendor-signed software, you are locked out of the economy? The irrefutable part here is that the security model works. Locking down the bootloader and enforcing TEE signatures does stop malware. But it also kills user agency. We are moving to a model where the user is considered the adversary on their own…
As I mentioned in another post: By 2026, you'll need two phones. My current setup: 1) An unmodified iPhone SE (2022 model) with OS support until 2032. This runs all my authentication, banking, health, etc. It is in airplane mode 99% of the time unless I need it. 2) The second is a Pixel 9a with Graphene OS for daily use, routing and internet access. This is expensive, but I found it to be the only viable solution to…
You'll still need to bring your iPhone out with you then and thus it will capture your location and more for the companies to data-mine.
Re: The Vietnam government has banned rooted phones from using any banking app
#248Earlier quoted context omitted.
Hardware tokens are not allowed in Europe to authorize certain operations such as bank transfers: you need a device that can show the operation you are about to authorize ("enter 123456 to confirm your payment of 99.99 € to Pornhub"). And that essentially means using a phone.
I’ve seen dedicated hardware devices which scan a QR-like code and show this in a little screen of their own. The bank provides them and does not require any app. I only know of a single bank using this.
>I only know of a single bank using this.
If it's not Crédit Mutuel then you now know of a second bank using this method.
Re: The Vietnam government has banned rooted phones from using any banking app
#249So, if you cannot cryptographically prove to a remote server that your device is running essentially unmodified, vendor-signed software, you are locked out of the economy? The irrefutable part here is that the security model works. Locking down the bootloader and enforcing TEE signatures does stop malware. But it also kills user agency. We are moving to a model where the user is considered the adversary on their own…
As I mentioned in another post: By 2026, you'll need two phones. My current setup: 1) An unmodified iPhone SE (2022 model) with OS support until 2032. This runs all my authentication, banking, health, etc. It is in airplane mode 99% of the time unless I need it. 2) The second is a Pixel 9a with Graphene OS for daily use, routing and internet access. This is expensive, but I found it to be the only viable solution to…
> This is expensive, but I found it to be the only viable solution to this problem.
Is it really? £150 on backmarket for a phone which will last 10 years doesn't feel expensive.
Makes sense to me to run any banking on a secure device anyway.
Re: The Vietnam government has banned rooted phones from using any banking app
#250Earlier quoted context omitted.
As I mentioned in another post: By 2026, you'll need two phones. My current setup: 1) An unmodified iPhone SE (2022 model) with OS support until 2032. This runs all my authentication, banking, health, etc. It is in airplane mode 99% of the time unless I need it. 2) The second is a Pixel 9a with Graphene OS for daily use, routing and internet access. This is expensive, but I found it to be the only viable solution to…
> By 2026, you'll need two phones... Need ? Unless and/or until the ability to log in and do your banking, healthcare, etc. via desktop/laptop goes away, then you don't need a phone to do any of that. Yes, 2FA may be required but in the tangential experience of myself, my partner and my two closest friends, we have multiple 2FA options available to us for our banking/healthcare apps that don't require a smartphone. I…
It depends on location. In my whereabouts banking and e-signing requires one of two 2FA solutions both are mobile-only.
Theoretically there is a third option with USB ID card reader to use certificate stored in ID card. But I never saw one used in practice. It’s a PITA to get those devices to work on anything beyond Windows. And they’re accepted in relatively few places.